
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
File: BPD3XK7T8miFrGVjD_qu53pw69k.mft (raw, json)
Hash identifier: M0xKW1+WoehxNgAu45Gp3Lsn3D16Vgnu7W41UT6/2X4=
Subject key identifier: B7:DF:5C:24:C6:36:92:87:14:09:95:67:F4:3A:8B:AA:5C:17:07:19
Authority key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Certificate issuer: /CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Certificate serial: 01974630147F5B16C0B29327925C18304230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
Manifest number: 131A
Signing time: Fri 06 Jun 2025 17:00:45 +0000
Manifest this update: Fri 06 Jun 2025 17:00:45 +0000
Manifest next update: Sat 07 Jun 2025 17:00:45 +0000
Files and hashes: 1: BPD3XK7T8miFrGVjD_qu53pw69k.crl (hash: 5mlIL/lQpPZk7U0WWuymjqFIWg547CJutKthOSko7m4=)
2: ilRpOqqhCRrukRL5kvILbezdwjw.roa (hash: 09XWT+P0AZf+EnMM2PlCmZMY0UVdVh5S35frUm5Llew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:14:7f:5b:16:c0:b2:93:27:92:5c:18:30:42:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Validity
Not Before: Jun 6 17:00:45 2025 GMT
Not After : Jun 7 17:00:45 2025 GMT
Subject: CN=b7df5c24c636928714099567f43a8baa5c170719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:2f:47:18:3c:61:f0:fa:87:a8:58:98:32:
31:fb:ff:75:ed:2d:10:2b:14:4a:a7:bd:b3:df:8c:
dd:82:9d:32:fc:36:3a:c6:40:fc:a6:15:f8:74:ff:
50:16:d0:85:41:25:02:e4:9e:d8:d6:65:a4:57:a6:
3c:68:cd:fb:c8:c2:0f:58:17:91:16:96:b2:8e:f1:
55:29:73:ea:f7:f2:e0:50:3a:8a:e7:f5:60:8f:a4:
41:ae:7c:dd:e7:52:1e:e9:a4:b4:38:8f:0c:9f:1a:
cc:b7:59:21:d4:a2:1a:08:bc:95:41:55:c7:52:6b:
d1:c0:5a:32:b1:66:9f:60:d2:a3:0b:9e:26:ac:af:
85:f3:a5:53:6b:fe:4d:ca:a7:1a:d8:6b:90:27:96:
22:49:88:53:51:bb:78:03:d4:a0:39:46:29:fb:72:
2a:8d:84:63:25:a7:67:19:f5:30:51:45:c5:a3:db:
81:49:b9:f5:79:f4:a2:12:be:4d:5b:96:21:94:99:
d2:ba:4c:23:9c:8e:54:88:d6:ed:a8:06:db:0c:47:
5f:1c:51:21:37:79:99:ed:8e:96:0a:ad:54:b1:6e:
f0:96:92:36:3f:14:d6:7a:87:f3:3e:de:2c:ee:54:
d2:39:47:be:f8:1f:94:65:94:6c:58:1f:ef:36:6c:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DF:5C:24:C6:36:92:87:14:09:95:67:F4:3A:8B:AA:5C:17:07:19
X509v3 Authority Key Identifier:
keyid:04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ca:ac:9b:08:25:3b:fa:94:90:c9:3c:b6:b4:58:54:25:8f:
27:9a:96:38:e8:2d:5e:77:42:34:f4:6d:e5:73:74:11:7f:d6:
18:9d:6e:2d:ce:d5:c7:fe:c9:ff:d3:a3:29:ec:7f:f7:e9:53:
31:cd:7b:34:d4:c2:30:f3:13:92:c2:40:3f:d4:10:2a:32:72:
13:31:b7:c7:83:0b:e9:bf:6c:4f:1f:b4:b4:52:cd:7f:b0:4f:
77:f9:95:cb:fb:8a:79:d4:83:97:44:41:75:71:64:52:d4:6e:
54:15:54:ad:46:b0:37:61:29:46:91:19:1e:97:f7:bf:18:7b:
4b:0b:d0:7e:7e:c8:f7:59:fe:39:4d:ee:ed:48:7e:f6:c8:23:
dc:06:40:f1:21:8e:15:33:48:4b:b0:95:97:b9:e9:f0:6f:bc:
48:85:67:0e:5f:1d:b2:42:54:f9:b4:ef:f5:3e:ca:9a:4f:0a:
ad:ec:3b:db:67:e8:d5:f1:9a:f0:f5:6d:8c:ea:25:40:bd:db:
3f:d0:b9:c9:41:5b:1b:0d:5c:6b:51:5a:50:20:bd:6d:eb:dd:
65:7d:14:b1:51:22:da:fb:d5:27:f7:85:45:85:56:0b:c8:8c:
76:cd:e5:b3:9f:fc:3c:15:b3:9d:90:a0:f0:a2:29:66:f6:ef:
24:07:ed:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:35 2025 by rpki-client